Communication system, access control apparatus, switch, network control method, and program

Abstract

A communication system includes: a control apparatus setting control information in a forwarding node(s); a forwarding node(s); and an access control apparatus. The forwarding node(s) forwards packets by using first control information set by the control apparatus and second control information for forwarding packets that do not match a matching condition(s) in the first control information set by the control apparatus from a predetermined port of the forwarding node(s). The access control apparatus includes a determination unit determining whether to generate control information for the packets forwarded from the predetermined port of the forwarding node(s) and requesting the control apparatus to generate control information.

What is claimed is: 
     
         1 .- 11 . (canceled) 
     
     
         12 . A communication system including a communication terminal comprising:
 a wireless communication unit to which a plurality of channels are allocated;   a channel status calculation unit that calculates, when one of the plurality of channels is set as a forwarding channel, a capacity that can be used in the one channel by the communication terminal and a capacity that can be used in the one channel by another communication terminal; and   a channel selection unit that determines, when one of the plurality of channels is set as a forwarding channel, whether a capacity that can be used in the one channel by the communication terminal satisfies a required bandwidth and determines, when another communication terminal has set the one channel as a forwarding channel, whether a capacity that can be used in the one channel by the another communication terminal satisfies the required bandwidth.   
     
     
         13 . The communication system according to  claim 12 , wherein the access control apparatus further comprises a control target packet extraction unit extracting control target packets that are transmitted to the determination unit from the packets forwarded from the predetermined port of the forwarding node. 
     
     
         14 . The communication system according to  claim 12 , wherein the forwarding node further comprises a header addition processing unit adding a header for forwarding to the access control apparatus to each of the packets to be forwarded from the predetermined port. 
     
     
         15 . The communication system according to  claim 12 , further comprising a plurality of access control apparatuses each of which corresponds to said access control apparatus, wherein a plurality of items of control information for sorting packets into the plurality of access control apparatuses are set as the second control information. 
     
     
         16 . The communication system according to  claim 12 , wherein the determination unit determines whether to generate control information on the basis of a predetermined access policy. 
     
     
         17 . The communication system according to  claim 12 , wherein, when the packets forwarded from the predetermined port of the forwarding node have a predetermined feature, the determination unit requests the control apparatus to generate control information for causing the forwarding node to drop the packets having the feature. 
     
     
         18 . The communication system according to  claim 13 , wherein the control target packet extraction unit is configured by a second forwarding node controlled by the control apparatus. 
     
     
         19 . An access control apparatus, arranged in a communication system comprising:
 a control apparatus setting control information in a forwarding node;   a forwarding node forwarding packets by using first control information set by the control apparatus and second control information for forwarding packets that do not match a matching condition in the first control information set by the control apparatus from a predetermined port of the forwarding node; and   a determination unit determining whether to generate control information for the packets forwarded from the predetermined port of the forwarding node and requesting the control apparatus to generate control information.   
     
     
         20 . A forwarding node connected to a control apparatus setting control information in the forwarding node, wherein:
 first control information set by the control apparatus and second control information are set, the second control information being for forwarding packets that do not match a matching condition in the first control information set by the control apparatus from a predetermined port of the forwarding node; and   the forwarding node forwards, when receiving packets that match a matching condition in the second control information, the packets after adding a predetermined header to each of the packets.   
     
     
         21 . A network control method, comprising:
 determining whether to generate control information for packets forwarded in accordance with second control information from a forwarding node that forwards packets by using first control information set by a control apparatus and the second control information for forwarding packets that do not match a matching condition in the first control information set by the control apparatus from a predetermined port of the forwarding node; and   requesting the control apparatus to generate control information based on a result of the determination.   
     
     
         22 . A non-transient computer-readable storage medium storing a program configured to cause a computer, which is arranged in a communication system comprising a control apparatus setting control information in a forwarding node and a forwarding node forwarding packets by using first control information set by the control apparatus and second control information for forwarding packets that do not match a matching condition in the first control information set by the control apparatus from a predetermined port of the forwarding node, to perform processing for:
 determining whether to generate control information for the packets forwarded from the predetermined port of the forwarding node; and   requesting the control apparatus to generate control information based on a result of the determination.   
     
     
         23 . The communication system according to  claim 13 , wherein the forwarding node further comprises a header addition processing unit adding a header for forwarding to the access control apparatus to each of the packets to be forwarded from the predetermined port. 
     
     
         24 . The communication system according to  claim 13 , further comprising a plurality of access control apparatuses each of which corresponds to the access control apparatus, wherein a plurality of items of control information for sorting packets into the plurality of access control apparatuses are set as the second control information. 
     
     
         25 . The communication system according to  claim 14 , further comprising a plurality of access control apparatuses each of which corresponds to the access control apparatus, wherein a plurality of items of control information for sorting packets into the plurality of access control apparatuses are set as the second control information. 
     
     
         26 . The communication system according to  claim 13 , wherein the determination unit determines whether to generate control information on the basis of a predetermined access policy. 
     
     
         27 . The communication system according to  claim 14 , wherein the determination unit determines whether to generate control information on the basis of a predetermined access policy. 
     
     
         28 . The communication system according to  claim 15 , wherein the determination unit determines whether to generate control information on the basis of a predetermined access policy. 
     
     
         29 . The communication system according to  claim 13 , wherein, when the packets forwarded from the predetermined port of the forwarding node have a predetermined feature, the determination unit requests the control apparatus to generate control information for causing the forwarding node to drop the packets having the feature. 
     
     
         30 . The communication system according to  claim 14 , wherein, when the packets forwarded from the predetermined port of the forwarding node have a predetermined feature, the determination unit requests the control apparatus to generate control information for causing the forwarding node to drop the packets having the feature. 
     
     
         31 . The communication system according to  claim 15 , wherein, when the packets forwarded from the predetermined port of the forwarding node have a predetermined feature, the determination unit requests the control apparatus to generate control information for causing the forwarding node to drop the packets having the feature.